This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
File:                     EDWtT69cNx08JO1z-tZs3GrGuRg.mft (raw, json)
Hash identifier:          q4GfK56JQ8yLbOf3Ysvads8SWeWswdihCXNjWe+Au6c=
Subject key identifier:   E2:2A:A1:2D:39:14:76:EA:7A:E9:53:38:20:03:FA:E1:61:B9:F9:7F
Authority key identifier: 10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18
Certificate issuer:       /CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
Certificate serial:       019B503C194326B07741FE6D2965F2F7878E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
Manifest number:          07FB
Signing time:             Wed 24 Dec 2025 12:01:14 +0000
Manifest this update:     Wed 24 Dec 2025 12:01:14 +0000
Manifest next update:     Thu 25 Dec 2025 12:01:14 +0000
Files and hashes:         1: EDWtT69cNx08JO1z-tZs3GrGuRg.crl (hash: gjnt6PRgNaqdNFke6hKK2PNz5Qxg+g90rsHdH8aw7LQ=)
                          2: qv58PcziHSozk6pOK4h_LgXLS7w.roa (hash: BZchB3z4vvljLfndUGS0R7LquQNr6/obSV/f0pocufU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Dec 2025 09:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:50:3c:19:43:26:b0:77:41:fe:6d:29:65:f2:f7:87:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1035ad4faf5c371d3c24ed73fad66cdc6ac6b918
        Validity
            Not Before: Dec 24 12:01:14 2025 GMT
            Not After : Dec 25 12:01:14 2025 GMT
        Subject: CN=e22aa12d391476ea7ae953382003fae161b9f97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:01:46:9b:c0:b9:ce:38:1f:03:94:f4:6b:
                    08:1f:c4:f2:e6:9e:df:28:a4:42:23:11:6e:e5:3b:
                    aa:40:38:3d:8b:65:fe:26:30:87:11:4f:a4:c3:94:
                    46:58:d2:43:26:11:ca:3d:66:62:b6:58:0d:86:73:
                    69:65:82:4d:d8:40:5a:3c:42:37:aa:d3:73:b9:8d:
                    fa:c8:0c:5a:f3:34:f3:0c:88:55:64:96:ad:9b:ca:
                    5a:0b:f1:33:24:40:28:84:af:44:dc:47:5a:37:9a:
                    dd:77:e7:89:a1:9e:0c:e7:97:eb:f2:ff:ff:35:52:
                    47:c0:3e:f8:2e:01:4a:64:33:a6:7d:78:87:7a:c3:
                    81:de:dd:29:bd:ca:ca:31:3a:0a:e3:9e:d5:ae:d3:
                    19:b9:78:95:64:1b:ec:74:d1:b3:69:61:89:28:e1:
                    96:14:62:c7:75:d4:a8:86:53:ff:88:1c:de:ba:5b:
                    36:b5:59:34:cb:60:2b:ca:cd:ad:93:f5:98:0e:20:
                    b6:a5:c9:72:83:ad:d0:6a:0e:a1:22:b0:91:7c:25:
                    3a:d2:5b:25:62:98:15:ac:a8:4d:4d:70:1c:58:0b:
                    3a:8e:f5:c0:fc:fb:03:28:9e:29:dd:dd:10:f4:7d:
                    5f:f7:b7:94:5b:c1:4b:e3:4e:24:bb:7b:53:db:83:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:A1:2D:39:14:76:EA:7A:E9:53:38:20:03:FA:E1:61:B9:F9:7F
            X509v3 Authority Key Identifier:
                keyid:10:35:AD:4F:AF:5C:37:1D:3C:24:ED:73:FA:D6:6C:DC:6A:C6:B9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDWtT69cNx08JO1z-tZs3GrGuRg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/6997ce-2898-4530-a40c-2f1bfbc7f0f3/1/EDWtT69cNx08JO1z-tZs3GrGuRg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:65:75:35:0a:ec:5c:49:dc:89:06:a4:de:f6:51:5d:b0:1e:
         39:8a:8c:f8:01:ac:76:9f:fe:55:10:6d:bf:de:7c:8e:48:1e:
         01:6c:92:0e:eb:17:64:f3:aa:1e:0c:f1:55:ea:3d:0a:d4:fd:
         b4:4e:78:f1:a7:89:b2:bc:4d:00:f0:5b:f3:e3:1b:09:e0:1f:
         d0:3b:03:5c:de:a5:2d:d4:5f:7a:99:cf:20:49:4c:ab:d3:91:
         f2:5d:c0:93:d4:c6:96:00:a9:35:92:38:3d:f2:18:e2:8d:da:
         d5:93:ed:0b:0b:56:a7:2b:34:6f:61:4f:a1:4e:fe:96:f0:b9:
         74:7c:a2:e9:0c:59:39:dd:f5:af:b0:77:ad:35:cb:78:10:6d:
         7a:80:28:56:9a:36:bc:db:39:25:76:48:e9:07:3c:21:c5:f0:
         a9:31:aa:34:2e:98:3d:5a:27:30:51:0a:89:29:03:6a:a3:d9:
         5c:35:51:cc:b5:5f:f7:62:79:f4:a5:c9:81:b3:40:36:e2:67:
         fb:d9:4d:30:6f:6b:08:1a:30:69:fd:2f:83:1c:94:95:43:b7:
         14:a1:a9:7e:c4:6e:52:a9:9f:7a:49:1d:0e:1f:ed:68:db:cf:
         af:71:53:c6:2d:5f:2b:bc:58:2b:45:9e:b4:1f:c0:bf:9d:fb:
         43:9b:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:31 2025 by rpki-client